Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
File:                     T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json)
Hash identifier:          hkYIRQ08Ihq+SknwVZ0W3luaQ+JwXZTLcnb/cGG8Vjg=
Subject key identifier:   FA:8C:B0:22:F5:A3:07:02:57:67:0D:13:FB:EA:B7:89:2E:4E:86:5C
Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3
Certificate issuer:       /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3
Certificate serial:       032F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
Manifest number:          032F
Signing time:             Sun 19 Oct 2025 03:08:29 +0000
Manifest this update:     Sun 19 Oct 2025 03:08:28 +0000
Manifest next update:     Sun 26 Oct 2025 03:08:28 +0000
Files and hashes:         1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: Zn5N10UgL2zihJIdNWLf/i0xw0U3FKSHvDyyTsxka9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl
                          rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A713, serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3
        Validity
            Not Before: Oct 19 03:08:28 2025 GMT
            Not After : Oct 26 03:08:28 2025 GMT
        Subject: CN=68f4562d-7a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:4d:d4:35:21:73:86:a2:8e:29:e4:6e:52:
                    83:5b:54:ed:d4:82:37:73:a9:cc:e9:47:85:6c:f2:
                    8a:fc:a0:56:88:07:e2:7e:19:d2:98:de:44:8a:70:
                    14:88:d4:03:ae:98:80:c6:a7:9d:c9:63:64:e7:67:
                    3a:02:51:44:71:fb:52:b1:a5:45:7b:87:d2:23:0d:
                    2e:51:38:9e:d3:fa:3d:5f:6a:6c:98:fb:84:87:0b:
                    d0:4d:f2:ee:bd:e2:6c:d0:41:1b:7d:ae:64:1c:99:
                    01:d4:b0:82:9d:b4:a8:6f:54:19:f5:df:e6:c8:d2:
                    d9:3c:b5:a8:03:43:b9:2f:d9:29:4b:d5:e6:bd:cf:
                    ec:b4:06:ea:68:0b:39:3c:d3:7e:99:a2:0d:42:f5:
                    37:e3:8c:b7:6f:c0:71:a5:b1:d7:65:06:25:f3:50:
                    28:80:82:00:1e:d6:b7:ac:f5:f8:19:9a:35:be:8d:
                    0f:0d:82:ec:ad:47:f5:62:ae:b0:0c:63:60:1a:e4:
                    ec:9c:a4:50:1e:f5:17:3d:5c:76:b7:53:be:5d:ec:
                    f5:27:ba:5e:bb:b3:56:c3:53:93:8a:45:56:2a:6c:
                    c1:11:1d:88:78:8f:12:0c:dd:20:bb:3d:53:f4:ac:
                    b0:30:53:51:6d:4c:3b:b9:74:86:60:94:80:e9:15:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8C:B0:22:F5:A3:07:02:57:67:0D:13:FB:EA:B7:89:2E:4E:86:5C
            X509v3 Authority Key Identifier:
                keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:61:4a:99:a4:5d:94:4a:bc:c4:c6:87:ea:de:b9:1f:eb:5c:
         13:2a:49:a8:b2:fd:d4:ae:b8:a8:90:e2:07:a8:b6:a9:64:1a:
         a6:f6:77:fe:bf:9c:d8:0c:c9:68:f3:e9:62:7b:5a:88:26:12:
         24:ba:8d:2a:87:6e:32:aa:1c:9f:6b:99:d8:30:c9:9e:fa:c9:
         c5:51:d6:95:8a:28:c4:5d:df:f6:e9:10:fe:9a:41:36:a7:ca:
         80:20:63:58:2d:8c:b4:04:47:0b:e6:08:92:77:96:a9:f1:65:
         1c:1c:85:c6:96:65:0a:c9:5d:3c:91:a2:db:b6:2e:26:e8:f2:
         df:07:19:2e:cf:1e:09:92:5e:f0:7c:ed:1a:64:71:b8:6a:38:
         8e:22:34:b5:66:e4:8f:91:38:7e:5b:e3:31:a9:31:fe:a5:79:
         45:e7:14:cc:51:b0:b9:fb:cf:2a:5d:c5:8a:92:c7:41:c1:50:
         9a:c5:8b:fb:ac:fc:e3:81:a8:cc:c2:fd:ce:2a:e7:c8:9b:92:
         50:a3:d9:ab:d6:cd:1e:5a:5c:e1:2b:bd:ae:81:ba:0b:9b:7a:
         e1:b9:c5:cc:dd:fb:9b:4e:09:14:fe:64:8f:20:64:3c:40:34:
         79:d2:f5:f2:fb:c1:59:80:47:be:37:cc:58:9d:55:8b:2f:6f:
         a5:32:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:03 2025 by rpki-client